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WHAT IS CLAIMED IS: 

1. A method in a data processing system having a program, the method 
comprising the steps performed by the program of: 

asynchronously receiving information about a computer-based system; and 
5 calculating a risk level at which the computer-based system operates based on the 

received information. 



2. The method according to claim 1, further comprising the step of outputting the 
calculated risk level. 



10 



3. The method according to claim 1, further comprising the steps of: 
calculating an exposure level to failure of the computer-based system based on the 

received information; and 

calculating a confidence level of the exposure level, 
15 wherein the risk level is calculated based on the exposure level and confidence level. 

4. The method according to claim 3, wherein the risk level is calculated using the 
formula: 

risk level = exposure level * confidence level / a mitigating factor, 
20 where the mitigating factor is a value associated with the computer-based system. 

5. The method according to claim 3, wherein the confidence level is increased 
each time the exposure level for the computer-based system is calculated and exceeds a 
predetermined value. 

25 

6. The method according to claim 3, wherein a rule engine is used to calculate 
the exposure level, the rule engine asynchronously receiving the information about the 
computer-based system as an input, and outputting the exposure level as an output. 

30 7. The method according to claim 6, wherein the rule engine comprises a 

plurality of rule engines each operating asynchronously; and wherein the risk level is 
calculated based on the exposure levels output from at least one of the rule engines. 
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8. The method according to c laim I , wherein the computer-based system isai 
least one of a data processing system, a component of a data processing system, and a 
computer program. 

9. The method according to claim 1, wherein information about the computer- 
based system is received by subscribing to the information. 

10. The method according to claim 1, wherein the risk level is published to a 
network connected to the data processing system. 

11. The method according to claim 1, wherein the received information comprises 
at least one of fault information, hardware configuration information, and software 
configuration information about the computer-based system. 

12. The method according to claim 1, further comprising the step of: 
determining a difficulty value for reducing the exposure level. 

13. The method according to claim 12, further comprising the step of: 
outputting the difficulty value. 

14. The method according to claim 12, further comprising the step of: 
determining a cost associated with reducing the exposure level. 

15. The method according to claim 14, further comprising the step of: 
outputting the cost. 

16. The method according to claim 1, further comprising the steps of: 
calculating at least a second risk level at which the computer-based system operates 

based on the received information; and 

trending the risk level and the at least second risk level by calculating a moving 
average of the risk levels for the computer-based system. 
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17. A computer-readable medium containing instructions that cause a data 
processing system having a program to perform a method comprising the steps performed by 
the program of: 

asynchronously receiving information about a computer-based system; and 
5 calculating a risk level at which the computer-based system operates based on the 

received information. 

18. The computer-readable medium according to claim 17, further comprising the 
step of outputting the calculated risk level. 

10 

19. The computer-readable medium according to claim 17, further comprising the 
steps of: 

calculating an exposure level to failure of the computer-based system based on the 
received information; and 
15 calculating a confidence level of the exposure level, 

wherein the risk level is calculated based on the exposure level and confidence level. 

20. The computer-readable medium according to claim 19, wherein the risk level 
is calculated using the formula: 

20 risk level = exposure level * confidence level / a mitigating factor, 

where the mitigating factor is a value associated with the computer-based system. 

21. The computer-readable medium according to claim 19, wherein the confidence 
level is increased each time the exposure level for the computer-based system is calculated 

25 and exceeds a predetermined value. 

22. The computer-readable medium according to claim 19, wherein a rule engine 
is used to calculate the exposure level, the rule engine asynchronously receiving the 
information about the computer-based system as an input, and outputting the exposure level 

30 as an output. 

23. The computer-readable medium according to claim 22, wherein the rule 
engine comprises a plurality of rule engines each operating asynchronously; and wherein the 
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risk level is calculated based on the exposure levels output from at least one of the rule 
engines. 

24. The computer-readable medium according to claim 17, wherein the computer- 
5 based system is at least one of a data processing system, a component of a data processing 

system, and a computer program. 

25. The computer-readable medium according to c laim 1 7, wherein information 
about the computer-based system is received by subscribing to the information. 

10 

26. The computer-readable medium according to claim 17, wherein the risk level 
is published to a network connected to the data processing system. 

27. The computer-readable medium according to claim 17, wherein the received 
15 information comprises at least one of fault information, hardware configuration information, 

and software configuration information about the computer-based system. 

28. The computer-readable medium according to claim 17, further comprising the 

step of: 

20 determining a difficulty value for reducing the exposure level. 

29. The computer-readable medium according to claim 28, further comprising the 

step of: 

outputting the difficulty value. 

25 

30. The computer-readable medium according to claim 28, further comprising the 

step of: 

determining a cost associated with reducing the exposure level. 

30 31. The computer-readable medium according to claim 30, further comprising the 

step of: 

outputting the cost. 
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32. The computer-readable medium according to claim 17, further comprising the 
steps of: 

calculating at least a second risk level at which the computer-based system operates 
based on the received information; and 
5 trending the risk level and the at least second risk level by calculating a moving 

average of the risk levels for the computer-based system. 

33. A data processing system comprising: 

a memory comprising a program that asynchronously receives information about a 
10 computer-based system, and calculates a risk level at which the computer-based system 
operates based on the received information; and 
a processing unit that runs the program. 

34. The data processing system according to claim 33, wherein the program 
15 further outputs the calculated risk level. 

35. The data processing system according to claim 33, wherein the program 
further calculates an exposure level to failure of the computer-based system based on the 
received information, and calculates a confidence level of the exposure level, wherein the risk 

20 level is calculated based on the exposure level and confidence level. 

36. The data processing system according to claim 35, wherein the risk level is 
calculated using the formula: 

risk level = exposure level * confidence level / a mitigating factor, 
25 where the mitigating factor is a value associated with the computer-based system. 

37. The data processing system according to claim 35, wherein the confidence 
level is increased each time the exposure level for the computer-based system is calculated 
and exceeds a predetermined value. 

30 

38. The data processing system according to claim 35, wherein a rule engine is 
used to calculate the exposure level, the rule engine asynchronously receiving the information 
about the computer-based system as an input, and outputting the exposure level as an output. 
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39. The data processing system according to claim 38, wherein the rule engine 
comprises a p lurality o f rule engines each operating asynchronously; a nd wherein t he risk 
level is calculated based on the exposure levels output from at least one of the rule engines. 

40. The data processing system according to claim 33, wherein the computer- 
based system is at least one of a data processing system, a component of a data processing 
system, and a computer program. 

41. The data processing system according to claim 33, wherein information about 
the computer-based system is received by subscribing to the information. 

42. The data processing system according to claim 33, wherein the risk level is 
published to a network connected to the data processing system. 

43. The data processing system according to claim 33, wherein the received 
information comprises at least one of fault information, hardware configuration information, 
and software configuration information about the computer-based system. 

44. The data processing system according to claim 33, wherein the program 
further determines a difficulty value for reducing the exposure level. -O 



45. The method according to claim 44, wherein the program further outputs the 
difficulty value. 

46. The data processing system according to claim 44, wherein the program 
further determines a cost associated with reducing the exposure level. 

47. The data processing system according to claim 46, wherein the program 
further outputs the cost. 

48. The data processing system according to claim 33, wherein the program 
further calculates at least a second risk level at which the computer-based system operates 
based on the received information, and trends the risk level and the at least second risk level 
by calculating a moving average of the risk levels for the computer-based system. 
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49. A data processing system comprising: 

means for asynchronously receiving information about a computer-based system; and 
means for calculating a risk level at which the computer-based system operates based 
5 on the received information. 
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